[Clamav-users] Feature Request Scanlist

2009-01-29 Thread Andre Hübner
Hi,

during practical work with webspace/virus etc. i missed a function in 
clamscan to scan files which were given by list in file.
Often after a Hackattack by ftp/upload etc. a lot of files with alike date 
of creation are found in filesystem.
Sometimes it is not necessary to scan whole filesystem with thousends of 
files. I could imagine to create a list in file by typical *nix commands 
with fileselection which is base for clamscan.
Thsi fileselection could be reduced by date of creation, special filetypes, 
chmod, whatever...
Sure, a complete scan should also be done, but to get fast results or to do 
quick automated scans of suspicious files this could be a nice feature.

How about that?
Thanks,
Andre 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Feature Request Scanlist

2009-01-29 Thread Tomasz Kojm
On Thu, 29 Jan 2009 13:26:29 +0100
Andre Hübner andre.hueb...@gmx.de wrote:

 Hi,
 
 during practical work with webspace/virus etc. i missed a function in 
 clamscan to scan files which were given by list in file.
 Often after a Hackattack by ftp/upload etc. a lot of files with alike date 
 of creation are found in filesystem.
 Sometimes it is not necessary to scan whole filesystem with thousends of 
 files. I could imagine to create a list in file by typical *nix commands 
 with fileselection which is base for clamscan.
 Thsi fileselection could be reduced by date of creation, special filetypes, 
 chmod, whatever...
 Sure, a complete scan should also be done, but to get fast results or to do 
 quick automated scans of suspicious files this could be a nice feature.
 
 How about that?

Please search the archives; it was already described how to use clamdscan
for that purpose.

-- 
   oo. Tomasz Kojm tk...@clamav.net
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Thu Jan 29 13:30:37 CET 2009
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Feature Request Scanlist

2009-01-29 Thread James Kosin
Tomasz Kojm wrote:
 On Thu, 29 Jan 2009 13:26:29 +0100
 Andre Hübner andre.hueb...@gmx.de wrote:
snip

 with fileselection which is base for clamscan.
 Thsi fileselection could be reduced by date of creation, special filetypes, 
 chmod, whatever...
 Sure, a complete scan should also be done, but to get fast results or to do 
 quick automated scans of suspicious files this could be a nice feature.

 How about that?
 
 Please search the archives; it was already described how to use clamdscan
 for that purpose.
 

You also have to be careful.  The date/time of creation or modification
can be faked or changed.  So, I wouldn't rely entirely on that alone to
determine what files to scan and which not to scan.

James



signature.asc
Description: OpenPGP digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] problems compiling scannedonly

2009-01-29 Thread Ryan Suarez
Hello Clamav,

I'm trying to compile scannedonly-0.11 with calmav-0.94.2 and 
samba-3.2.4 on debian etch.

I get the following error when trying to compile scannedonly:

scannedonly-0.11# make
make[1]: Entering directory `/usr/local/src/scannedonly-0.11/man'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/usr/local/src/scannedonly-0.11/man'
make[1]: Entering directory `/usr/local/src//scannedonly-0.11/src'
gcc -g -O2 -Wall -pipe -c -o scannedonlyd_clamav.o scannedonlyd_clamav.c
scannedonlyd_clamav.c: In function 'main':
scannedonlyd_clamav.c:748: error: 'struct cl_limits' has no member named 
'maxmailrec'
scannedonlyd_clamav.c:749: error: 'struct cl_limits' has no member named 
'maxratio'
make[1]: *** [scannedonlyd_clamav] Error 1
make[1]: Leaving directory `/usr/local/src/scannedonly-0.11/src'
make: *** [all] Error 2

Could someone please help?

thanks,
Ryan
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] problems compiling scannedonly

2009-01-29 Thread Török Edwin
On 2009-01-29 21:48, Ryan Suarez wrote:
 Hello Clamav,

 I'm trying to compile scannedonly-0.11 with calmav-0.94.2 and 
 samba-3.2.4 on debian etch.

 I get the following error when trying to compile scannedonly:

 scannedonly-0.11# make
 make[1]: Entering directory `/usr/local/src/scannedonly-0.11/man'
 make[1]: Nothing to be done for `all'.
 make[1]: Leaving directory `/usr/local/src/scannedonly-0.11/man'
 make[1]: Entering directory `/usr/local/src//scannedonly-0.11/src'
 gcc -g -O2 -Wall -pipe -c -o scannedonlyd_clamav.o scannedonlyd_clamav.c
 scannedonlyd_clamav.c: In function 'main':
 scannedonlyd_clamav.c:748: error: 'struct cl_limits' has no member named 
 'maxmailrec'
 scannedonlyd_clamav.c:749: error: 'struct cl_limits' has no member named 
 'maxratio'
 make[1]: *** [scannedonlyd_clamav] Error 1
 make[1]: Leaving directory `/usr/local/src/scannedonly-0.11/src'
 make: *** [all] Error 2

 Could someone please help?
   

MaxRatio was dropped, and instead of MaxMailRec MaxRecursion is used in
clamd.conf.

So you can delete the code related to maxratio, and maxmailrec, and try
compiling again.

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml